Remote Cybersecurity & Compliance Specialist (RMF/ATO)

Iron Bow Technologies; Herndon (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Iron Bow Technologies in Herndon, VA seeks a VA Cybersecurity and Compliance Specialist to lead cybersecurity compliance, RMF, ATO-support, FIPS, and security documentation for HSM and post-quantum crypto environments. Primarily remote with limited travel to customer facilities.

The candidate will be the principal interface between engineering activities and customer cybersecurity/authorization requirements, supporting VA ATO processes, and ensuring alignment with NIST controls and VA policies.

Qualifications

• Federal cybersecurity compliance experience.
• Experience supporting Federal or VA ATO processes.
• Working knowledge of NIST SP 800-37 RMF and NIST SP 800-53 controls.
• FIPS 140-3 compliance experience.
• Experience preparing or supporting ATO packages.
• Experience with CMVP documentation and cryptographic artifacts.
• Ability to translate technical HSM/PKI configurations into security evidence.

Responsibilities

• Lead VA cybersecurity compliance, RMF, ATO, continuous monitoring, and compliance activities.
• Develop, review, and maintain cybersecurity and authorization artifacts supporting VA systems.
• Support RMF activities in line with NIST SP 800-37 and applicable controls.
• Maintain and validate FIPS 140-3 CMVP evidence for HSM platforms.
• Review CMVP/CAVP validation certificates and cryptographic compliance evidence.
• Support VA ISSO, OIS, COR, and program stakeholders with technical evidence for ATO and renewal.
• Coordinate security reviews of HSM upgrades, migrations, and production changes.
• Ensure alignment with VA Handbook 6500 and VA security policies.

Job description

Iron Bow Technologies in Herndon, VA seeks a VA Cybersecurity and Compliance Specialist to lead cybersecurity compliance, RMF, ATO-support, FIPS, and security documentation for HSM and post-quantum crypto environments. Primarily remote with limited travel to customer facilities.

The candidate will be the principal interface between engineering activities and customer cybersecurity/authorization requirements, supporting VA ATO processes, and ensuring alignment with NIST controls and VA policies.